Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer
File: f4zGhHEilLZfAYtxngcvRCoBW9E.cer (raw, json)
Hash identifier: tqt/7vNA3kxztZBVHXF9dj2qFW1nac6+3RkAiQ7CAyE=
Subject key identifier: 7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CED9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Dec 2023 19:18:55 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 203.0.139.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 22:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118489 (0x1ced9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 1 19:18:55 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:50:b7:09:f5:65:f5:f3:0e:ef:23:40:e4:
56:54:77:f0:d4:39:e8:dc:82:07:7b:25:4d:51:b1:
a9:b0:4e:fb:5d:ca:6d:76:dc:8f:98:a5:b9:9c:35:
4c:5d:54:e0:f4:7e:71:14:d5:dd:af:c9:8c:b8:eb:
5a:71:b3:a9:2c:17:3c:23:17:f7:4c:44:22:7a:dd:
56:58:86:82:bf:10:d9:b8:30:86:d9:25:7c:fc:28:
07:83:c0:5d:0e:c7:fd:41:cb:07:d1:55:bf:7f:cf:
08:cf:d4:64:ac:c7:ae:cc:ed:bc:1c:2f:72:d8:2d:
60:41:0a:b8:05:d7:0a:0d:9c:1a:b4:c3:b7:29:62:
dc:bb:4a:3a:14:2e:97:75:43:40:78:c7:de:92:fa:
e4:b3:6f:b0:62:d4:2b:c2:45:af:2f:f3:98:a9:9b:
39:24:4b:8f:a1:ef:be:7d:c8:24:d1:1f:80:53:0a:
4e:c7:6e:73:2d:31:ca:ff:fe:78:aa:4e:e8:7a:a9:
89:41:07:91:62:a5:70:63:b8:32:56:06:07:23:ee:
f9:45:2e:25:df:02:51:3f:42:48:d8:ca:3c:5e:4c:
59:c7:7a:24:17:ec:ef:59:b0:c6:bc:26:7e:7b:bd:
f0:40:d5:c5:86:9e:48:4f:85:8f:69:21:0d:8c:60:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.0.139.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6d:06:9c:0d:66:a0:2b:d0:91:ef:5c:19:4f:45:27:38:35:
8b:bc:cd:ae:a4:ca:3f:ef:35:3e:35:96:33:b2:0a:6f:a9:02:
de:8f:36:06:ff:36:9e:f7:d0:4a:54:f8:a5:66:1e:a6:06:c2:
bf:2d:83:6d:40:67:86:6a:a9:e2:d3:4e:2f:8f:56:da:7c:c0:
1e:cc:16:f9:ef:72:48:47:cd:1b:73:20:ed:14:14:51:6d:3f:
c6:c4:f2:f5:b0:f2:ea:00:12:99:2a:5d:f7:0a:ae:b3:e2:35:
80:15:bf:28:98:71:04:26:fa:43:76:f3:45:1f:cb:87:55:c3:
ea:d2:2c:6b:26:ac:43:6d:9a:19:06:f5:56:46:6a:65:2f:3c:
de:2a:82:18:1f:78:c2:ed:98:3f:55:70:b4:a7:b1:53:c2:97:
be:a0:07:a2:02:b0:43:f5:ae:da:9a:1d:1f:11:ae:10:6f:ae:
21:48:84:6b:54:aa:b4:0c:fc:65:f0:15:e8:6a:71:20:02:b2:
30:3e:97:8c:20:09:ac:e4:95:21:01:93:40:19:38:51:04:6a:
b8:94:85:84:1c:28:97:70:b2:5f:e1:d7:e4:d1:f0:0c:d2:ad:
d7:ab:d3:b1:38:b7:ab:a7:b4:ab:af:28:b1:c2:42:98:1f:8c:
98:5a:d6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:22:07 2024 by rpki-client on console-fra.rpki-client.org